CVE-2024-9985
Critical
Description
Enterprise Cloud Database from Ragic does not properly validate the file type for uploads. Attackers with regular privileges can upload a webshell and use it to execute arbitrary code on the remote server.
SeverityCritical
CVSS10.0
Exploit probability—
ProductRagic Enterprise Cloud Database
PublishedOct 15, 2024
First seenOct 15, 2024
Weakness typeCWE-434Unrestricted upload of dangerous file type
How to fix
Update
- ragic enterprise_cloud_database2024-08-08 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ragic enterprise_cloud_database | v < 2024-08-08 | 2024-08-08 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.